Quick question for you: Do you consider any of the following passwords secure?
- thereisnofatebutwhatwemake
- eastofthesunwestofthemoon
- !)@(#*$&%^Test123
- *tecno9654postgres
- !@#$%^&*()_+lisa
- Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn1
If your answer to just one of the above is "Yes"! Think again real hard about using a good password manager!
Those passwords above were all guessed using "dictionary lookup" attacks within hours or days (not weeks or years)! Several hours to days!
(And please note: there are all considerably longer than your simple "8 or 9 character passwords"!)
Rule of thumb: if you try to come up with a password that is based on any (combination of) word(s) that can be found "on the Internet" (Twitter, Wikipedia, websites, news groups, the Bible, other book texts available in electronic form, ...), it is very likely that it will be guessed! Even 1f u d0!permutat1ons$and_try2bcl3v3r! ("rule-based substitution attacks").
For a detailed background why you should be very concerned:
http://arstechnica.com/security/201...ing-the-next-frontier-of-password-cracking/2/
"How the Bible and YouTube are fueling the next frontier of password cracking"
And in the background of several major (commercial) sites were hacked and millions of encrypted passwords where stolen, you really should have different passwords for each and every service!
(What people often forget: they might have a hugely "secure password" for e.g. their Apple ID, but they have a weak password for their email, so attackers can guess the email password, reset the Apple ID with a confirmation email sent to that email address, and *zonK*! There you go! Your Apple ID accessible now to them as well!)
Well, as I said: reconsider of what you think is "secure"...
I'm not saying not using this app is more secure